ZipRecruiter

Log In

1

Isso Issm Jobs in Virginia (NOW HIRING)

GDIT

IT and Cyber Risk Auditor

Falls Church, VA · Hybrid

$81K - $110K/yr

Yes Help safeguard critical government systems by applying your hands-on ISSM/ISSO experience to security governance, risk evaluation, and compliance oversight. As an IT and Cyber Risk Auditor at ...

GDIT

Secure Enclave System Engineering Lead

Mclean, VA

$170K - $230K/yr

Apply deep expertise in RMF, NIST 800-53, Continuous Monitoring (ConMon), ISSO/ISSM practices, and secure workstation engineering to ensure compliant implementation * Lead the day-to-day team ...

IC-CAP LLC

ISSO 3 102-182

Alexandria, VA · On-site

It will be required to work in close coordination with the ISSM and ISO in monitoring the ... Perform ISSO duties in support of in-house and external customers * Conduct continuous monitoring ...

next page

Showing results 1-20

All JobsIsso Issm JobsIsso Issm Jobs in Virginia

Isso Issm information

What is an Information Systems Security Officer (ISSO)?

Information System Security Officers (ISSOs) and Information System Security Managers (ISSMs) are cybersecurity professionals responsible for the protection and oversight of information systems within an organization, particularly in compliance-driven environments like government or defense. ISSOs focus on the day-to-day security operations, monitoring, and implementation of security controls, while ISSMs are typically responsible for the overall security program management and ensuring compliance with relevant regulations and policies. Both roles are crucial for maintaining the confidentiality, integrity, and availability of sensitive data.

What are the key skills and qualifications needed to thrive as an ISSO or ISSM?

To thrive as an ISSO/ISSM, you need a solid understanding of cybersecurity principles, risk management frameworks (such as NIST RMF), and compliance requirements, usually supported by a degree in information security or a related field. Familiarity with security tools like SIEM systems, vulnerability scanners, and certifications such as CISSP or Security+ are typically required. Strong analytical thinking, attention to detail, and the ability to communicate complex security concepts to diverse audiences are essential soft skills. These skills ensure the effective protection of organizational assets, compliance with regulations, and the ability to respond proactively to evolving security threats.

What are the main challenges faced by an ISSO or ISSM when working with cross-functional teams?

ISSO/ISSMs often collaborate with IT, compliance, and business units to ensure security policies align with organizational goals. A common challenge is bridging the communication gap between technical and non-technical stakeholders to ensure security requirements are understood and implemented effectively. Additionally, balancing strict security controls with operational needs requires negotiation and adaptability. Building strong relationships and maintaining clear documentation are key to overcoming these challenges and ensuring a secure and compliant environment.

What is the difference between Isso Issm vs Project Manager?

AspectIsso IssmProject Manager
CertificationsTypically requires ISSM certification, security clearancesOften requires PMP or CAPM certifications
Work EnvironmentPrimarily in cybersecurity, information systems securityIn various industries managing projects across departments
Industry UsageCommon in defense, government, IT security sectorsWidely used across construction, IT, healthcare, and more

While both roles involve managing technical aspects, Isso Issm focuses on information security management within cybersecurity environments, often requiring specific security certifications. Project Managers oversee a broad range of projects across industries, emphasizing planning, execution, and delivery. Understanding these differences helps clarify career paths and employer expectations in respective fields.

What are popular job titles related to Isso Issm jobs in Virginia?

For Isso Issm jobs in Virginia, the most frequently searched job titles are:

What job categories do people searching Isso Issm jobs in Virginia look for?

The top searched job categories for Isso Issm jobs in Virginia are:

What cities in Virginia are hiring for Isso Issm jobs?

Cities in Virginia with the most Isso Issm job openings:

Isso Issm jobs near you
Infographic showing various Isso Issm job openings in Virginia as of August 2026, with employment types broken down into 87% Full Time, 11% Part Time, and 2% Contract. Highlights an 91% Physical, 4% Hybrid, and 5% Remote job distribution.

Cloud ISSO with Security Clearance

22nd Century Technologies, Inc.

Fort Belvoir, VA • On-site

Other

Re-posted 23 days ago

Job description

Please find below the job details: Job Title: Cloud Security ISSO Location: Fort Belvoir VA Duration: FTE Clearance Required: Secret Certifications: Formal general security certification (e.g., CompTIA Security, Cloud Security, Alliance - Certificate of Cloud Security Knowledge, (ISC) 2 Certified in Cybersecurity / Systems Security Certified Practitioner, GSEC - Global Information Assurance Certification Security Essentials , Offensive Security, Certified Professional, EC-Council Certified Ethical Hacker.) Perform all Information Systems Security Officer / Information System Security (ISSO/ISSM) relate duties. This includes supporting ECMA's risk management of all cloud information systems/enclaves (AWS & AZURE). Responsible for all 7 steps of the NIST RMF (Prepare, Categorize, Select, Implement, Assess, Authorize & Monitor) to ensure compliance with Federal/DOD/Army reequipments. Also responsible for supporting the ECMA Cloud Security Operations team, in reviewing and approving security related tickets and other ad-hoc tasks. * Serve as an Information Systems Security Officer/Manager (ISSO/ISSM) for ensuring the security and compliance of sensitive and classified DOD/ARMY data within AWS and AWS(IL4/5/6) environments. * Collaborate with various stakeholders and worked across multiple divisions/business units to identify and mitigate potential cyber risks to the agency cloud environment. * Work cross-functionally with individual contributors and senior leadership in developing ATO packages. * Lead continuous monitoring efforts for multiple cloud enclaves to include ACAS scanning, POAM remediation, risk assessments (evidence collection for audits and reviews) * Conduct comprehensive audits and risk assessments (NIST 800-53rev5), ensuring vendor and tenant compliance with DOD SRG security standards and readiness for production deployment. * Develop and implement continuous monitoring and security strategies in collaboration with senior management, enhancing assessment and authorization initiatives. * Review and assess FEDRAMP CSP authorization packages (SSP, CRM, SAR, P&Ps, POAMs) prior to inclusion into the ARMY's Enterprise Cloud Management Agency production environment. * Manage, Track and Remediate over 400 POAMs to strengthen the ARMY cloud secure posture. * Completed four assessments on FEDRAMP CSO's to ensure compliance with ARMY rules and regulations prior to inclusion into the ARMY network.

Apply